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AMENDMENTS TO THE CLAIMS 

Claim 1 (Presently Amended): A device for calculating a result of a modular exponentiatio n within 
an asymmetrical cryptosystem , n being a modulus, d being an exponent and a pri vate key of the 
asymmetrical cryptosystem.a nd c being a quantity to be subjected to the modular exponentiation^ 
and, as a result, a quantity m is obtained which equals the modular exponentiation of c with the 
private key d as an exponent, comprising: 

means for calculating a first auxiliary quantity dp, wherein the means for calculating a first 
auxiliary quantity is formed to calculate the first auxiliary quantity dp is defined as follows: 

dp = d mod (p - 1), 

wherein p is a first prime numbe r, and wherein mod represents a modulo operation ; 

means for calculating a second auxiliary quantity dq, wherein the means for calculating a 
second auxiliary quantity is formed to calculate the second auxiliary quantity dq according to the 
following equation is d e fined as follows : 

dq = d mod (q - 1), 
wherein q is a second prime number, 
wherein a product of p and q equals the modulus n; 
means for generating a random number (IRND); 

means for generating a third auxiliary quantity dp', wherein the means for generating a third 
auxiliary quantity dp' is formed to calculate the third auxiliary quantity according to the following 
equatio n is d e fined as follows : 

dp' = IRNDx(p-l) + dp a i 
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wherein IRND is a random number generated by the means for generating a random number, 
and wherein dp is the first auxiliary quantity calculated by the means for calculating a first auxiliary 
quantity; 

means for generating a fourth auxiliary quantity dq', wherein dq' is defined according to the 
following equation a s follow s: 

dq' = IRNDx(q-l) + dq a i 

wherein IRND is the random number generated by the means for generating a random 
number, and wherein dq is the second auxiliary quantity calculated by the means for calculating a 
second auxiliary quantity; 

means for generating a safety parameter T; 

means for generating a fifth auxiliary quantity Mp, wherein the means for generating a fifth 
auxiliary quantity is formed to calculate t he fifth auxiliary quantity Mp according to the following 
equation is d e fined as follows : 

Mp = c dp ' mod {pJXi 

wherein T is a safety parameter generated by the means for generating a safety parameter, 
and wherein dp' is the third auxiliary quantity calculated by the means for calculating a third 
auxiliary quantity; 

means for generating a sixth auxiliary quantity Mq, wherein the means for generating a sixth 
auxiliary quantity is formed to calculate the sixth auxiliary quantity Mq according to the following 
equation i s defin e d as follows : 

Mq = c dq ' mod{qlXf and 
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wherein T is the safety parameter generated by the means for generating a safety parameter, 
and wherein dq' is the fourth auxiliary quantity calculated by the means for calculating a fourth 
auxiliary quantity; 

means for calculating a seventh auxiliary quantity H7, wherein the means for calculating the 
seventh auxiliary quantity is formed to calculate the seventh auxiliary quantity H7 according to the 
following equation: 

H7 = Mp x Mq mod T, 

wherein T is the safety parameter T generated by the means for generating a safety 
parameter, wherein Mp is the fifth auxiliary quantity calculated by the means for generating a fifth 
auxiliary quantity, and wherein Mq is the sixth auxiliary quantity calculated by the means for 
generating a sixth auxiliary quantity;- aad 

means for calculating an eighth auxiliary quantity H8, wherein the means for calculating an 
eighth auxiliary quantity H8 is formed to calculate the eighth auxiliary quantity H8 according to the 
following equation: 

H8 = c (dp'Wmod(T-i) modT ^ 

wherein T is the safety parameter T generated by the means for generating a safety 
parameter, wherein dp' is the third auxiliary quantity calculated by the means for generating a third 
auxiliary quantity, and wherein dq* is the fourth auxiliary quantity calculated by the means for 
generating a fourth auxiliary quantity ;-and 

means for comparing the seventh auxiliary quantity H7 and the eighth auxiliary quantity H8, 
wherein the means for comparing is arranged to indicate an error if the seventh and eighth auxiliary 
quantities are different; and 
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means for calculating the result of the modular exponentiation m in case no error has been 
indicated , wherein the means for calculating is formed to calculate the result m according to the 
following equation is d e fined as follows : 

m = Mq + [(Mp - Mq) x q" 1 mod p] x q^ 

wherein Mp is the fifth auxiliary quantity calculated by the means for generating a fifth 
auxiliary quantity, and wherein Mq is the sixth auxiliary quantity calculated by the means for 
generating a sixth auxiliary quantity. 

Claims 2 and 3 (Deleted) 

Claim 4 (Presently Amended): The device according to claim 1, being provided for an RSA 
decryption or RSA signature, m being a plain text message, d being a seerefc -private k ey and c being 
an encrypted message. 

Claim 5 (Deleted) 

Claim 6 (Presently Amended): The device according to claim $1, wherein the safety parameter T is 
a prime number. 

Claim 7 (Presently Amended): The device according to claim 31, wherein the safety parameter T is 
small compared to the first prime number p and the second prime number q, respectively. 
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Claim 8 (Presently Amended): A method for calculating a result of a modular exponentiation 
within an asymmetrical cryptosvstem on a data processing device , n being a modulus, d being an 
exponent and a private key o f the asymmetrical cryptosystenua nd c being a quantity to be subjected 
to the modular exponentiation, and, as a result a quantity m is obtained which equals the modular 
exponentiation of c with the private key d as an exponent, comprising the following steps: 

calculating a first auxiliary quantity dp, wherein dp is defined as follows: 

dp = d mod (p - 1), 

wherein p is a first prime number; 

calculating a second auxiliary quantity dq, wherein dq is defined as follows: 

dq = dmod (q- 1), 
wherein q is a second prime number, 
wherein a product of p and q equals the modulus n; 
providing a random number (IRND); 

generating a third auxiliary quantity dp', wherein dp' is defined as follows: 

dp' = IRNDx(p-l) + dp; 
generating a fourth auxiliary quantity dq', wherein dq' is defined as follows: 

dq' = IRNDx(q-l) + dq; 

generating a safety parameter T: 

generating a fifth auxiliary quantity Mp, wherein the fifth auxiliary quantity Mp is defined as 
follows: 

Mp = c dp ' mod (pT); 
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generating a sixth auxiliary quantity Mq, wherein the sixth auxiliary quantity Mq is defined 
as follows: 

Mq = c dq ' mod{q!);-and 
calculating a seventh auxiliary quantity H7, wherein the seventh auxiliary quantity is defined 
as follows: 

H7 = Mp + Mq mod T: 
calculating an eighth auxiliary quantity H8, wherein the eighth auxiliary quantity H8 is 
defined as follows: 

comparing the seventh auxiliary quantity H7 and the eighth auxiliary quantity H8: 
indicating an error if the seventh and eighth auxiliary quantities are different: and 
in case no error has been indicated, calculating the result of the modular exponentiation m, 
wherein m is defined as follows: 

m = Mq + [(Mp - Mq) x q~ l mod p] x q. 



Claim 9 (Deleted) 
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